IdM Database Component Specifications

Hi. We are starting down our IdM installation and deployment. I have searched the documentation and this forum a bit for more detailed information about the database requirements. Specifically, I am looking for:
1) How many users have an Oracle 11g repository instance vs. Oracle 10g?
2) A rough estimate of the repository size say for provisioning/de-provisioning of 50K users.
3) How hard is the database hit for provisioning processes?
Any advice regarding database setup and/or pointing to resources out there to help our DBAs get going is greatly appreciated.
Thanks.

B, I have Oracle 10gr2, with over 25k users and 18 resorces. The database is currently consuming 32Gb. The reconciliation process hits the database hard, but the performance issues are created by bad coding or slow resources, not the DB itself. It's mounted on red hat with 2 dual core processors and 5gb ram.
The size of your installation will vary according to your specific configuration. I'm keeping the finished tasks for audit reasons and we have over 300.000 each year. You might not choose to keep those records and be ok with 10 or 20 gb.
hth,
Nicolas

Similar Messages

Connecting to IDMS database via JDBC

Has anyone successfully set up JDBC connectivity to generate reports using data in an IDMS mainframe database containing multiple schemas, where several schemas may contain tables with the same name?
We have no issues when using ODBC to connect to the various schemas in this IDMS databases, but we need to convert the connectivity for existing reports to JDBC.
When I open the JDBC connection, I see the expected hierarchy of schemas and tables in the Database Expert window. If I try to select a table I get the following error message if a table of that same name exists in other schemas:
Failed to retrieve data from the database.
Details: SQL exception: [SQL State:] 42000 [Error message:] DB002046 T11094 C-4M347: Duplicate table ids for ASISCHEM.SR-ACT and CORPCHEM.SR-ACT in area CORPDB.ACTIVITY-AREA [Database Vendor Code: -4]
So although we can connect to the database via JDBC, we can't use the connectivity because Crystal does not appear to correctly resolve that I'm selecting the table from within a specific schema.
Can anyone advise on how to make sure the table name selection is qualified by the correct schema name?
Thanks in advance.

Hello,
Try running the query outside of CR to verify the JDBC driver is passing the fully qualified name also.
Then look in the Designer and Show SQL to verify it's there as well as Set Table Location. You may be able to fully qualify it in that UI.
Thank you
Don

Database component is not displayed in system monitoring

hi all
I configured system monitoring but I can`t see Database conponent (ex.SID_database) .
I can see another components that are servers and systems (ex.host_SID_SNO)
I checked database in SMSY and rfc commuication is trustconnection between SOLMAN and ERP
Another Servers (ex. BW, XI, EP) are displayed Database component.
how can I solve this problem
thanks

hi, Andreas
thanks for your reply
I tried but same.
any help plz

IDM Database integrity checks

Are there any routines or jobs that check / repair the integrity of the IDM database ? IOn particular the linkages between MSKEYVALUEs and MSKEYs
In our development IDM instance in the MXIV_ENTRIES table we have some MXREF_MX_PRIVILEGE records which point to MSKEY's that dont exist. Found this problem when a user deletion through the GUI would fail with 'privilege doesnt exist' error. Since development is used for all sorts of destructive testing and initial installs of service pack upgrades it is no wonder the data integrity is suspect.
Other option is to clear the lot and simply reload from all the clients. But I was just wondering if others have had any integrity problems and if there are 'fix' routines available

Hi Phil,
I'm not aware of any standard mechanism in SAP IDM that you can use to cleanup your database.
I gues you have to implement this on your own. The following SQL command should give you all the assigned privileges that no longer exist in the identity store:
select mskey, attrname, searchvalue
from mxiv_sentries where
attrname = 'MXREF_MX_PRIVILEGE' and searchvalue not in
(select mskey from mxiv_sentries)
You could then loop through the result and delete all the attribute values.
Best regards
Holger

PAS/AAS JAVA instances on UNIX/Linux - database component

Hi SCN,
Firstly consider this is all UNIX/Linux based...
In the past when creating AS (or AAS now) SAP dialog instances for ABAP systems I rarely ran a SAPINST process. It was simpler to copy existing profiles and NFS mount the kernel. There is no database component relating to the instances so you could easily add/remove them
However in Java it seems there is instance data inside the database Java schema, meaning that you have to install/re-install AS/AAS instances using SAPINST/SWPM to ensure these are properly created; otherwise the instance will not connect.
Does anyone have any details on what constitutes this database component? I would like to look at it with my own eyes and see what makes it up.
Regards all, Jamie
AKA doonan_79

Hi Jamie,
In case of JAVA, there we have BOX number. If you have a logical host on top of your physical host, then you can go with over scheme. Otherwise, because of BOX number, you have to go with export/import option.
Refer this thread: Understanding the Java Instance ID issue
Divyanshu

"Database Audit Specification" not available.

Hi all,
Been asked by one of the developers to audit delete & insert for one night only so I thought to investigate built in auditing via "new
Database Audit Specification". I am in the sysadmin role but no option to add a database audit, the server audit is however available.
This is SQL 2008R2 enterprise.
Any ideas?
Thanks

I am in the sysadmin role but no option to add a database audit, the server audit is however available.
This is SQL 2008R2 enterprise.
Any ideas?
Thanks
It is something that should be created at Database level so you need to navigate to Database - Security folder.
There "New DB Audit Sepcification" option can be seen.
E.g.
Cheers,
Vaibhav Chaudhari
[MCP],
[MCTS], [MCSA-SQL2012]

Error during IdM database creation on Oracle

Hi,
We sometimes encounter the following error when creationg IDM database on Oracle (mxmc-install.sh) :
*** Updates installed
*** Creating language generation procedures
mxp_init_ids_onelang
mxp_init_ids_lang
Warning: Procedure created with compilation errors.
*** Creating procedures
mc_schemaversion
mc_version
mxpv_job_tasklink
And then we have errors on other procedures and initial load of the database :
mxp_init_ids
Warning: Procedure created with compilation errors.
mc_reset_ids
Warning: Procedure created with compilation errors.
mxp_init_all_ids
Warning: Procedure created with compilation errors.
mxp_Xcreate_ids
Warning: Procedure created with compilation errors.
mxp_create_ids
Warning: Procedure created with compilation errors.
BEGIN mxp_init_all_ids(:vStatus,:vStatusText); END;
ERROR at line 1:
ORA-06550: line 1, column 7:
PLS-00905: object IP3_OPER.MXP_INIT_ALL_IDS is invalid
ORA-06550: line 1, column 7:
PL/SQL: Statement ignored
BEGIN mxp_create_ids(:IsId,:Status,:StatusText); END;
ERROR at line 1:
ORA-06550: line 1, column 7:
PLS-00905: object IP3_OPER.MXP_CREATE_IDS is invalid
ORA-06550: line 1, column 7:
PL/SQL: Statement ignored
During first installation of IDM database there was no problem. So it seems it's a environnement parameter or Oracle parameter issue. Has anyone encountered the same problem ?
We were told there were no changes either on Oracle or on the system. But there must have been a change somehow impacting the language.
Do you have any idea on the Oracle parameters that could be involved ?
Thanks in advance,
Regards,
Herve.

Hi,
I was facing the same problem and it was not possible to create an identity store.
The solution for me was increasing the oracle sga_max_size and shared_pool_size parameters.
They had the initial value fom installation of AS Java and setting shared_pool_size to 400MB fixed the procedure compilation problem.
After that I rerun the mxmc-update.cmd script and no more errors show up.
Creating idenitiy stores also works now.
Regards...Philipp

DATABASE AUDIT SPECIFICATION ON SPECIFIC USERS

Hi All,
Currently I am using SQL server 2012 and would like to implement database audit specification on specific users in my database. These are the users in my database name Payroll :-
Payroll\Andy.Bred - db_owner
Payroll\Arpit.Shah - db_owner
Payroll\webapp - db_datareader, db_datawriter, EXECUTE
web_payroll - db_datareader, db_datawriter, EXECUTE
In my database audit specification settings, I would like to capture any SELECT,UPDATE,DELETE and EXECUTE command for users Payroll\Andy.Bred & Payroll\Arpit.Shah only since they owned db_owner access. However, I am unable to capture any single command
from both users. I do not want to put 'Principal' as public since I just want to capture both users activity.
Is it I miss out anything? Is it because of windows login account? Hope can get some advise here. Highly appreciated.
Thanks.
Best Regards,
Han

Hi Han,
Are your Windows login accounts member of the SQL Server sysadmin role? If that is the case, the login accounts are indirectly mapped as database user dbo. Please change the principal name in the audit action name to dbo and check if the users activity is
being audited.
There are also similar threads for your reference.
http://www.sqlservercentral.com/Forums/Topic1082578-1526-1.aspx
https://social.msdn.microsoft.com/Forums/sqlserver/en-US/a1df289d-555e-46c3-803a-2ae97af807a3/sql-auditing-database-audit-specification-is-not-logging-events-by-windows-authenticated-user?forum=sqlsecurity
Thanks,
Lydia Zhang
Lydia Zhang
TechNet Community Support

Can we have multiple database audit specification on a single server audit ?

Hi,
We are having a 2 node Sql Clustered instance of SqlServer 2008 R2 Enterprise running
on windows server 2008 R2. We have about 88 databases in the instance.
Our servers run on Intel Xeon(R) CPU X5670 @2.94 GHz with 6 cores(12 logical processor).
The servers are having 12GB of RAM.
We are planning to introduce database level audit to find if there is any activity on
some of our databases. These databases are not growing in size and there is a request
from the application team to ascertain whether the endusers are accessing the database
over a period of time. In this context I have 2 queries-:
1)Can we have multiple database audit specification on a single server audit ie can we
audit multiple databases to find out the user activity on those databases at a time? Or
should we a separate server audit for each database audit specification?
2)We plan to have the target of the audit on a file on the same shared volume(lun) where
the MDF file and LDF files are located(in EMC storage) and in this context what performance
monitor counters should we watch to ascertain whether there is any performance degradation
due to introduction of server audit.
Thanking you in advance
Binny Mathew.

As Auditn is at the SQL Server instance level. You can have multiple audits per SQL Server instance.
http://msdn.microsoft.com/en-us/library/cc280386.aspx
Database Audit Specification
The Database Audit Specification object also belongs to a SQL Server audit. You can create one database audit specification per SQL Server database per audit.
The database audit specification collects database-level audit actions raised by the Extended Events feature. You can add either audit action groups or audit events to a database audit specification. Audit events are
the atomic actions that can be audited by the SQL Server engine. Audit action groups are predefined groups of actions. Both are at the SQL Server database scope. These actions are sent to the audit, which records
them in the target. Do not include server-scoped objects, such as the system views, in a user database audit specification.
Database-level audit action groups and audit actions are described in the topic SQL Server Audit Action Groups and Actions.
You can also consider using a Profiler trace file to capture the events.
Best Regards,Uri Dimant SQL Server MVP,
http://sqlblog.com/blogs/uri_dimant/
MS SQL optimization: MS SQL Development and Optimization
MS SQL Consulting:
Large scale of database and data cleansing
Remote DBA Services:
Improves MS SQL Database Performance
SQL Server Integration Services:
Business Intelligence

Description of IdM Database Tables

Are there materials that describes the IdM database schema? i.e. what each of the tables/columns are used for?

There is a short description given on the following link
http://blogs.sun.com/timmerman/
Thanks
Gaurav Jain

ALTER DATABASE AUDIT SPECIFICATION

Hi,
I've created a database audit in SQL2008R2 and now can't seem to disable/delete it. I assumed it would be a case of
disable database audit
delete database audit
disable server audit
delete server audit
However I cannot even do steps 1 and 2. I scripted deletion of the database audit but when I run it from a query window it just runs and runs.
USE [Admin]
GO
ALTER DATABASE AUDIT SPECIFICATION [DatabaseAuditSpecification-20150420-122643]
WITH (STATE = OFF)
GO
USE [Admin]
GO
DROP DATABASE AUDIT SPECIFICATION [DatabaseAuditSpecification-20150420-122643]
GO
Now I can't even open/refresh the "Audits" folder at the instance level, getting this error
"Lock request time out period exceeded. (Microsoft SQL Server, Error: 1222)"
I have the option of restarting the instance tonight at 18:30, however I need to be able to audit
a couple of databases for DELETE/INSERT before this time.
Any ideas?
Thanks in advance.

I suspect that you may need to have exclusive access to the database for a short period of time in order to disable the Database
Audit Specification.
Perhaps try switching the database to RESTRICTED_USER in order to perform the audit deletion/disable and then
reverting back to MULTI_USER
https://social.msdn.microsoft.com/Forums/sqlserver/en-US/0ef500d6-b902-4c64-88d3-e2871eb98ac8/trouble-while-enabling-database-audit-specification

Readin IDM database from ABAP

Hello,
I would like to know where could I find an API description how to communicate from ABAP to the IDM database. IDM is said to be opened, so other system can read from it. That should mean ABAP too. Can anybody point me to such information source, provide a link to an example code, something to start from?
Thanks Otto

I have the similar requirement. Please help me.
The IdM (7.2) has been directly connected to ECC clients via Jco RFC (No VDS). But for the other business suit clients (CRM, SRM, ..), it is connected via VDS.
Here is my requirement. Due to the security reasons, we have decided to maintain some translation data in the IdM instead of SAP tables. Translation data is very simple. It will have two columns with ZID and EID.
Forward Translation is from ZID to EID
Reverse Translation is from EID to ZID
We would like to use these translations in the interfaces and conversions. During the execution of interface/conversion, if the program encounters ZID, it should be translated to EID using some methods. Since the data is not in SAP tables, we have to get it from IdM.
Since there is no VDS, do I need to read the IdM database directly? What are the steps involved in this process from ABAP developer point of view and also from IdM team? It would be great, it you suggest some examples.
Thanks for reading and your help will be greatly appreciated.

Test connection in Database component is failed

In JDeveloper 2.0 when I try test connection in Database
component I get message:
borland.jbcl.dataset.DataSetException: End of TNS data channel
at
borland.jbcl.dataset.DataSetException.throwException(Compiled
Code)
at
borland.jbcl.dataset.DataSetException.throwException(Compiled
Code)
at
borland.jbcl.dataset.DataSetException.SQLException(Compiled Code)
at borland.sql.dataset.Database.openConnection(Compiled
Code)
java.sql.SQLException: End of TNS data channel
at
oracle.jdbc.dbaccess.DBError.check_error(DBError.java:363)
at
oracle.jdbc.driver.OracleConnection.<init>(OracleConnection.java:
125)
at
oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:155)
at
java.sql.DriverManager.getConnection(DriverManager.java:91)
at
java.sql.DriverManager.getConnection(DriverManager.java:134)
at borland.sql.dataset.Database.openConnection(Compiled
Code)
I try use JDBC Thin 8.0.5 and 8.1.4
My Applet work is fine. In JDeveloper 1.0 (AppBuider) I not get
this message.
It's bug?
null

Hi Eugeny,
If you are using the JDBC 8.0.5 driver to connect to an 8.1.4
database, you need to make sure of the following:
* within the JDeveloper IDE, open Project->Project Properties
from the menu
* in the libraries list, make sure that Oracle 8.0.5 JDBC appears
in the list of libraries before BOTH Oracle 8.1.4 JDBC AND
'Enterprise Java Beans'
If the Oracle 8.0.5 JDBC library appears after either of the
above two libraries, select it in the list, and drag it up so
that it appears first. Save your project and retry the compile.
I think this may be what is causing the errors. Please reply if
this does not fix your problem, or if I misunderstood.
- Laura
Eugeny Orlov (guest) wrote:
: In JDeveloper 2.0 when I try test connection in Database
: component I get message:
: borland.jbcl.dataset.DataSetException: End of TNS data channel
: at
: borland.jbcl.dataset.DataSetException.throwException(Compiled
: Code)
: at
: borland.jbcl.dataset.DataSetException.throwException(Compiled
: Code)
: at
: borland.jbcl.dataset.DataSetException.SQLException(Compiled
Code)
: at borland.sql.dataset.Database.openConnection(Compiled
: Code)
: java.sql.SQLException: End of TNS data channel
: at
: oracle.jdbc.dbaccess.DBError.check_error(DBError.java:363)
: at
oracle.jdbc.driver.OracleConnection.<init>(OracleConnection.java:
: 125)
: at
: oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:155)
: at
: java.sql.DriverManager.getConnection(DriverManager.java:91)
: at
: java.sql.DriverManager.getConnection(DriverManager.java:134)
: at borland.sql.dataset.Database.openConnection(Compiled
: Code)
: I try use JDBC Thin 8.0.5 and 8.1.4
: My Applet work is fine. In JDeveloper 1.0 (AppBuider) I not get
: this message.
: It's bug?
null

Java database component

Hi!
Is there any GUI component in Java such as the TDBGrid in the Delphi?
I mean, is there any way to manipulate data in a database through a graphic component what is NOT a JTable?
Thanks!

Not in Swing directly. Several third parties have components like this. For example, JBuilder has JDBTable. A quick google should be able to find others, some even free (sourceforge.com).
Personally, I won't use these. I have some available, but just like the GUI builder integrated into the IDE, it creates unmaintainable code. You are stuck with their interface and their methodology. Nobody will be able to modify it wilhout that IDE or incredible amoumts of time.
It takes a little while to learn all the concepts you need to code it manually, but once you do, I think it's just as fast as using their components and infinitely more flexible.

Database access specific bug

Using database access components in Labview 8.2 to access a MS access database.
If a column is called "Language" it cant be read or used.
Any attempt to read the column, or data within the column using sql or any other method will fail.
If the column is renamed, it will work.
Why is it so,.
Why is the column name "Language" specifically singled out to not work in Labview database access vis.

'Language' is a reserved word in SQL. The Access help lists these words and using any of them will cause the same problem.

IdM Database Component Specifications

Similar Messages

Maybe you are looking for